CVE-2025-21264

No fix known EPSS <1%CVSS 7.1

Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Published 2025-05-13 · CVE record · OSV

Products: Microsoft Visual Studio Code CoPilot Chat Extension, Microsoft Visual Studio Code